Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          QeJWfXE5GuovSKvuJv00esZ+pTsSn4gDksb5L1G1gUo=
Subject key identifier:   94:E7:10:14:6D:13:07:51:4D:83:F2:A1:53:11:A6:CD:B9:CB:93:53
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       75BBA096930B27E5E073D5B4528BA56E8359A537
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          04C9
Signing time:             Thu 24 Apr 2025 11:02:18 +0000
Manifest this update:     Thu 24 Apr 2025 10:57:18 +0000
Manifest next update:     Sun 27 Apr 2025 19:32:18 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: kXwtpM6gEKnMSzt60z1vKvrTuVCi/xs9uJkJbxte0us=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:a0:96:93:0b:27:e5:e0:73:d5:b4:52:8b:a5:6e:83:59:a5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: Apr 24 10:57:18 2025 GMT
            Not After : Apr 27 19:32:18 2025 GMT
        Subject: CN=94E710146D1307514D83F2A15311A6CDB9CB9353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:da:6f:3b:6b:dd:22:5a:23:73:be:f3:c2:
                    d9:12:45:a1:01:92:db:68:6b:3e:27:9e:38:5f:0b:
                    9a:93:0f:76:a1:d5:71:b1:cb:36:86:24:b2:b7:ed:
                    18:cf:2b:db:7f:2c:0c:a5:ef:58:ad:3e:0d:4b:e2:
                    69:de:39:a5:ce:61:cb:4b:b3:cb:14:f8:59:9e:4c:
                    ef:a3:16:7d:fb:bb:c9:7b:64:88:2b:e9:b4:ee:82:
                    be:3d:1e:e8:9b:a0:d4:0c:48:3f:36:6f:49:64:a0:
                    9b:55:3a:00:91:a0:d1:40:bd:b4:3d:f1:00:22:c1:
                    fa:39:91:84:f9:fd:a1:2c:11:fb:b3:c4:3d:c1:1a:
                    6f:2e:79:da:29:64:2f:86:63:e2:aa:1f:29:1f:f5:
                    d8:11:46:e8:b1:3c:07:33:3e:45:db:6b:09:cf:c8:
                    e0:9a:e2:37:3e:7f:ca:8d:0c:38:df:43:94:b4:d7:
                    bf:9d:b4:b5:91:6b:e6:bc:e7:0a:c7:a6:8f:55:a2:
                    05:21:f4:e8:a8:81:e1:bb:59:fb:31:34:e6:aa:33:
                    41:04:7c:b9:6a:fc:2a:d4:b2:2b:1d:80:3f:9c:c5:
                    57:96:bb:04:bd:dd:b0:7c:09:91:7d:c7:6a:1e:ab:
                    bb:2a:6a:8d:ae:0d:85:63:8b:7f:ce:a8:9b:8a:80:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E7:10:14:6D:13:07:51:4D:83:F2:A1:53:11:A6:CD:B9:CB:93:53
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:7e:fa:57:d3:48:c1:93:bc:48:bd:30:3b:e7:22:9f:54:
         f2:82:3e:06:cc:3d:b6:14:af:79:ec:e9:41:e7:5d:4c:b6:69:
         05:fc:86:c9:c9:f6:03:bc:20:37:eb:1f:03:83:86:44:90:f7:
         af:9d:c9:5d:73:8e:aa:b4:dd:48:63:66:69:bf:b2:d6:67:00:
         27:bb:b3:d5:5a:84:e6:34:71:12:5c:bc:ba:6b:10:e3:7d:6a:
         53:a6:80:3b:b0:8c:c9:eb:65:66:5d:f4:75:1e:f5:c2:0f:9b:
         fb:c8:bc:6a:7a:cc:e5:a2:8e:ce:e1:4c:c4:79:52:76:4c:09:
         ab:91:fd:00:45:db:f0:bc:ea:a2:69:df:8a:98:35:5d:0c:e9:
         e4:94:ee:27:ed:a0:31:fc:6a:55:98:5a:7d:49:94:09:37:61:
         1f:10:29:a6:82:09:70:ea:62:08:ff:c2:3d:e1:60:b4:97:f1:
         bd:65:cb:99:c2:42:57:11:cb:81:10:d6:7e:6c:8f:b8:d2:01:
         2b:44:9c:93:6b:6b:44:4e:aa:16:ae:84:ab:3d:cf:db:cb:5a:
         28:a5:de:d5:a9:55:b6:ed:3f:5f:5e:ce:c1:df:b5:87:f7:28:
         bb:35:75:15:cf:36:2b:f6:5b:ef:0c:d6:0c:b0:8f:04:a1:7f:
         8e:5d:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net